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REMARKS 

In this Amendment, Applicant has amended Claims 2 and 3. Claims 2 and 3 have 
been amended to proper dependent form. It is respectfully submitted that no new matter 
has been introduced by the amended claims. All claims are now present for examination. 
Favorable reconsideration is respectfully requested in view of the preceding amendments 
and the following comments. 

SPECIFICATION : 

The specification has been objected as containing informalities regarding the 
subtitles for different sections, and inconsistency in using symbol ® and symbol [+]. 

It is respectfully submitted that the specification has been amended to correct the 
informalities by adding proper titles for relevant sections, and correct clerical errors in 
using symbol [+]. The amendments to the specification are entirely editorial in nature. It 
is respectfully submitted that no new matter has been introduced by the amended 
specification. 

OATH/DECLARATION : 

The Declaration has been objected as failing to (1) identify the mailing address of 
each inventor; (2) state the person making the oath or declaration has reviewed and 
understands the contents of the specification, including the claims, as amended by any 
amendment specifically referred to in the oath or declaration; (3) state the person making 
the oath or declaration acknowledges the duty to disclose to the Office all information 
known to the person to be material to patentability as defined in 37 CFR 1 .56; (4) include 
the clause regarding "willful false statements ..." required by 37 CFR 1.68; (5) identify 
the citizenship of each inventor; and (6) identify the city and either state or foreign 
country of residence of each inventor. 
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Applicant respectfully submits that the originally submitted Declaration has 
included the above identified information. Applicant hereby encloses a copy of blank 
Declaration, which is used for preparing the originally submitted Declaration. Such form 
is a standard form used by the undersigned attorney. As it clearly shows, it includes the 
statement identified by the Examiner, including: (a) the statement that the person making 
the oath or declaration has reviewed and understands the contents of the specification, 
including the claims, as amended by any amendment specifically referred to in the oath 
or declaration; (b) the statement that the person making the oath or declaration 
acknowledges the duty to disclose to the Office all information known to the person to be 
material to patentability as defined in 37 CFR 1.56; and (c) the clause regarding "willful 
false statements ..." required by 37 CFR 1.68. 

In addition, it is respectfully submitted that the originally submitted Declaration 
does identify (a) the mailing address of each inventor - ul. Alexandrovskaya, d. 88/2, kv. 
62, g. Vsevolozhsk, Russia,. 188710 (for Alexandr Andreevich MOLDOVYAN) and ul. 
Alexandrovskaya, d. 88/2, kv. 58, g. Vsevolozhsk, Russia, 188710 (for Nikolay 
Andreevich MOLDOVYAN); (b) the citizenship of each inventor - Russia (for both 
inventors); and (c) the city and either state or foreign country of residence of each 
inventor - Vsevolozhsk, Russia (for both inventors). 

Applicant is preparing for filing a substitute Declaration, in which the foreign 
priority will be claimed. The above information will also be provided. 

REJECTIONS UNDER 35 U.S.C. $ 102 : 

Claims 1 and 2 have been rejected under 35 U.S.C. § 102 (e) as allegedly being 
anticipated by Delayaye et al. (US 4,751,733), hereinafter Delayaye. 

Applicant traverses the rejection. It is respectfully submitted that Delayaye does 
not anticipate the Claims 1 and 2 as presently claimed. In the claimed method, 
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encryption is carried out by means of performing on the converted data subblocks, which 
is two-place operations, fixed bit transposition and controlled bit transpositions 
implemented using combination electronic circuits that provides low cost of hardware 
and high encryption rate. 

Delayaye discloses that the encryption is carried out by means of performing on 
the converted data block fixed bit transpositions and performing on the data subblocks 
controlled substitutions implemented by a tabular method using tables stored in the 
memory of the encryption device. 

It is respectfully submitted that the above comparison shows that the claimed 
method and the cited patent include different aggregates of features. Claims 1 - 2 of the 
present invention include the feature of performing on the data subblocks controlled bit 
transpositions . Delayaye does not disclose such feature. Therefore, the encryption 
method implemented by the device according to Delayaye does not anticipate Claims 1 - 
2 of the present invention. 

Accordingly, withdrawal of the rejections under 35 U.S.C. § 102 (b) is 
respectfully requested. 

REJECTIONS UNDER 35 U.S.C. § 103 : 

Claim 3 have been rejected under 35 U.S.C. § 103, as allegedly being obvious and 
unpatentable over Delayaye et al. (US 4,751,733), hereinafter Delayaye, in view of 
Mittenthal, Statistically Efficient Inter-Road Mixing Block Substitute Devices January 
1996, hereinafter Mittenthal. . 

Applicant traverses the rejection. It is respectfully submitted that in view of the 
presently claimed invention, the rejection has been overcome. More specifically, 
Delayaye fails to disclose that "before performing the current operation of transposing 
bits of said i-th subblock which depends on the value of said j-th subblock, a binary 
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vector V is additionally generated, said operation of transposing bits of said i-th subblock 
being performed depending on the V value, whereby said binary vector is generated 
depending on its value at the time of performing the preceding step of converting one of 
said subblocks and depending on the j-th subblock value." Nowhere in prior art has 
suggestion or incentive to modify Delayaye with Mittenthal to achieve the invention as 
currently claimed. One of ordinary skilled in the art would not discern the present 
invention at the time of its invention. In addition, as stated above, Delayaye does not 
disclose the feature as claimed in Claim 3 due to its dependency on Claim 1 . Even if 
combined, Delayaye and Mittenthal will not achieve the present invention as defined in 
Claim 3. Therefore, the rejections under 35 U.S.C. § 103 second paragraph have been 



Accordingly, withdrawal of the rejection under 35 U.S.C. § 103 is respectfully 
requested. 

Having overcome all outstanding grounds of rejection, the application is now in 
condition for allowance, and prompt action toward that end is respectfully solicited. 



overcome. 



Respectfully submitted, 



JACOBSON HOLMAN PLLC 



Date: March 18,2004 
(202) 638-6666 
400 Seventh Street, N.W. 
Washington, D.C. 20004 
Atty. Dkt. No.: P65724US0 



John C. wilmaril 
Registnrtioh No. 22,769 
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METHOD FOR CRYPTOGRAPHIC CONVERSION OF BINARY DATA 



BLOCKS 



5 



BACKGROUND OF THE INVENTION 



RECEIVED 



FIELD OF THE INVENTION 



MAR 1 9 2004 

Technology Center 2100 



The present invention relates to the field of electrical communications and 
10 computer technology and, more particularly, to the field of cryptographic methods and 
devices for ciphering of messages (information). 



- secret key is binary information known only to the legitimate owner; 

- cryptographic conversion is digital data conversion which allows the influence 
of source data bit on a plurality of output data bits, for example, for the purpose of 
protecting information from unauthorised reading, generating digital signature, generating 

20 modification detection code; some important types of cryptographic conversions are 
unilateral conversion, hashing and ciphering; 

- information hashing is a certain method of forming a so-called hash-code of a 
fixed size (typically 128 bits) for messages of any size; hashing methods are widely used 
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The totality of features of the claimed method uses the following terms: 




that are based on iterative hash functions using block mechanisms of information 
cryptographic conversion (see Lai X., Massey J.L. Hash Functions Based on Block 
Ciphers/ Workshop on the Theory and Applications of Cryptographic Techniques. 
EUROCRYPT92, Hungary, May 24-28, 1992, Proceedings, p.53-66); 
5 - ciphering is a information conversion process which depends on the secret key 

and which transforms a source text into a ciphered text representing a pseudo-random 
character sequence from which obtaining information without the knowledge of the secret 
key is practically unfeasible; 

- deciphering is a process which is reverse to ciphering procedure; deciphering 
1 0 ensures recovering information according to the cryptogram when the secret key is known; 

- cipher is a totality of elementary steps of input data conversion using the secret 
key; the cipher may be implemented in the form of a computer program or as a separate 
device; 

- binary vector is a certain sequence of off-bits and on-bits, such as 101 101001 1; 
15 a specific structure of the binary vector may be interpreted as a binary number if it is 

assumed that position of each bit corresponds to a binary bit, i.e. the binary vector may be 
compared with a numerical value which is univocally determined by the binary vector 
structure; 

- cryptanalysis is a method of calculating the secret key for obtaining 
20 unauthorised access to ciphered information or developing a method which provides 

access to the ciphered information without calculating the secret key; 

- unilateral conversion is such a conversion of a L-bit input data block into an L- 
bit output data block which allows to easily calculate the output data block according to 
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the input block, while calculation of the input block which would transform into 
randomly selected output block is an essentially impracticable task; 

- unilateral function is a function the value of which is easily calculated according 
to a given argument, however, calculating the argument according to a given function 

5 value is a computationally difficult problem; unilateral functions are implemented as a 
procedural sequence of unilateral conversion of a certain input block (argument), the 
output value of which is assumed as the function value; 

- cryptographic resistance is a measure of safety of ciphered information 
protection and represents labour intensity measured in the number of elementary 

10 operations to be performed in order to recover information according to a cryptogram 
when the conversion algorithm is known but without the knowledge of the secret key; in 
the case of unilateral conversions, by cryptographic resistance is meant complexity of 
calculating of the input block value according to its output value; 

- cyclic shift operations depending on converted subblocks or depending on a 
15 binary vector are operations of cyclic shift on a number of bits set by the subblock value 

or by the binary vector value; operations of cyclic shit to the left (right) are designated 
with the sign "<«"(">»"), for example, the notation Bi<«B 2 signifies an operation of 
cyclic shift to the left of subblock B) on the number of bits equal to the value of binary 
vector B2; similar operations are basic for the RC5 cipher; 
20 - single-site operation is an operation performed on one operand (data block or 

binary vector); the subblock value after performing a certain given single-site operation 
depends only on initial value; an example of the single-site operations are operations of 
addition, subtraction, multiplication, etc. 
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Methods are known of block ciphering of data, see, e.g., US standard DES (National 
Bureau of Standards. Data Encryption Standard. Federal Information Processing 
Standards Publication 46, January 1977). This method of data block ciphering comprises 
generating a secret key, splitting the data block being converted into two subblocks L and 
5 R and alternate changing the latter by carrying out the operation of bit-for-bit modulo 2 
summation on the subblock L and a binary vector which is generated as an output value 
of a certain function F according to the value of subblock R. Thereupon the blocks are 
interchanged. Function F in this method is implemented by performing the transposition 
and stuffing operations carried out on subblock R. This method has a high conversion rate 

10 when realised in the form of a specialised electronic circuitry. 

However, the known closest prior art method uses a secret key of a small size (56 
bits) which makes it vulnerable to cryptanalysis based on finding a key to fit it. The latter 
is associated with high computer power of modern mass-use computers. 

The closest by its technical essence to the claimed method for cryptographic 

15 conversion of binary data blocks is the method implemented in the cipher RC5 and 
described in the work (R.Rivest, The RC5 Encryption Algorithm/ Fast Software 
Encryption, second International Workshop Proceedings (Leuven, Belgium, December 
14-16, 1994), Lecture Notes in Computer Science, v.1008, Springer-Verlag, 1995, pp.86- 
96). The closest prior art method comprises generating a secret key in the form of a 

20 totality of subkeys, splitting an input data block into subblocks A and B, and alternate 
subblock conversion. The subblocks are transformed by performing on them single-site 
and dual-site operations. As dual-site operations, modulo 2 n addition operations are used, 
where n=8, 16, 32, 64 and a modulo 2 bit-for-bit summing operation. As the single-site 
operation, an operation of cyclic shift to the left is used, whereby the number of bits on 
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which the subblock being converted is shifted depends on the value of another subblock, 
this determines dependency of the cyclic shift operation at the current step of subblock 
conversion on the initial value of the input data block. The dual-site operation is 
performed on a subblock and subkey as well as on two subblocks. Characteristic of the 
5 closest prior art method is the use of cyclic bit shift operation of one of subblocks 
depending on the value of another subblock. 

A subblock, for example subblock B, is converted as follows. A modulo 2 bit-for- 
bit summing operation ("©") is performed on subblocks A and B and the value obtained 
following this operation is assigned to subblock B. This is written as a relation: 
10 B<-B©A, 

where the sign signifies the assignment operation. After that, the operation of cyclic 
shift on the number of bits equal to the value of subblock A is performed on subblock B: 
B <- B «< A. 

Then the modulo 2 n summing operation is performed on the subblock and one of 
15 subkeys S: B «- (B + S) mod 2 n , where n is the subblock length in bits. After this, 

subblock A is converted in the similar way. Several such conversion steps are performed 

for the both subblocks. 

This method provides high encryption rate when implemented in the form of a 

computer program or in the form of electronic ciphering devices. However, the closest 
20 prior art has some disadvantages, namely, it fails to ensure high resistance of 

cryptographic data conversion to differential and linear cryptanalysis (Kaliski B.S., Yin 

Y.L. On Differential and Linear Cryptanalysis of the RC5 Encryption Algorithm. 

Advances in Cryptology-CRYPTO'95 Proceedings, Springer-Verlag, 1955, pp.171-184). 

This disadvantage is due to the fact that effectiveness of the use of operations dependent 
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on data being converted, with the aim of enhancing ciphering resistance to known 
cryptanalysis methods, is reduced by the fact that the number of potentially realisable 
versions of cyclic shift operations is equal to the number of binary bits of subblock n and 
does not exceed 64. 



cryptographic conversion of binary data blocks, wherein input data conversion would be 
effected in such a manner as to provide the increase in the number of various versions of 
an operation which depends on the block being converted due to which resistance to 
differential and linear cryptanalysis is increased. 



SUMMARY OF THE INVENTION 

The task is achieved by the fact that in a method of cryptographic conversion of 
binary data blocks, comprising splitting a data block into N>2 subblocks, alternate 

15 converting the subblocks by performing on the i-th, where i<N, subblock at least one 
conversion operation, said operation depending on the value of the j-th, where j<N, 
subblock, while the new feature, according to the invention, is the fact that as the 
operation dependent on the value of the j-th subblock, a transposition operation of the bits 
of the i-th subblock is used. 

20 Due to such solution, the number of possible versions of the j-th subblock value 

dependent operation is increased which enables to enhance cryptographic conversion 
resistance to differential and linear cryptanalysis. 
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The basis of the invention is formed by the task to develop a method of 
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A novel feature is also that the transposition operation of the bits of the i-th 
subblock which depends on the value of the j-th subblock is formed depending on a secret 
key before the beginning of the i-th subblock conversion. 

Due to such solution, modification of the transposition operation of the bits of the 
5 i-th subblock which depends on the value of the j-th subblock is not predetermined which 
provides additional enhancement of cryptographic conversion resistance to differential 
and linear cryptanalyses and allows to reduce the number of conversion operations and 
thereby to increase ciphering rate. 

A novel feature is also that before performing current operation of transposing of 
10 the bits of the i-th subblock which depends on the j-th subblock, a binary vector V is 
additionally generated, while the transposition operation of the bits of the i-th subblock is 
performed depending on the value of V, whereby the binary vector is generated 
depending on its value at the time of performing the previous conversion step for one of 
subblocks and on the value of the j-th subblock. 
15 Due to such solution, additional enhancement of cryptographic resistance is 

provided to attacks based on break-downs of the ciphering device. 

Below the essence of the invention will be clarified in more detail by way of its 
embodiments with references to attached drawings. 
Brief Description of th e Drawings 
20 BRIEF DESCRIPTION OF THE DRAWINGS 

Fig.l presents a generalised diagram of cryptographic conversion according to the 
claimed method. 

Fig.2 schematically presents the structure of controlled transposition block. 
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Fig.3 represents the structure of controlled transposition block having a 32-bit 
information input. 

Fig.4 presents a block diagram of elementary switch. 

Fig. 5 presents a table of input and output signals of the elementary switch when 
5 u=l is control signal. 

Fig.6 presents a table of input and output signals of the elementary controlled 
switch when the value of the control signal is u=0. 

B e st Embodim e nts of th e Invention 
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

10 

The invention is explained with a generalised diagram of data block conversion 
based on the claimed method which is shown in Fig.l, 

where: P is the controlled transposition block; A and B are converted n-bit 
subblock; K4 r , K4 r _i s IC^, K4 r . 3 are n-bit secret key elements (n-bit subkeys); V is binary 

15 vector generated depending on input data; ® symbol signifies modulo 2 bit-for-bit 
summing operation; sign denotes modulo n summing operation, where n is the data 
subblock length in bits. Bold solid lines designate the n-bit signal transmission bus, thin 
solid lines signify transmission of one bit, thin dotted lines signify transmission of one 
control bit. Bold dotted lines signify n control signal transmission bus, n control signals 

20 being subkeys bits or binary vector bits. Using the subkey bits as control signals ensures 
forming a specific modification of subblock bit transposition operation dependent on the 
value of an input block which additionally enhances resistance of cryptographic 
conversion. 
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Fig.l shows one round of conversions. Depending on a specific implementation of 
controlled transposition block and the required conversion rate, from 2 to 16 and more 
rounds may be set. This scheme of cryptographic conversion procedures may be used 
ciphering and for unilateral conversions. In the latter case, the secret key is not used, and 
5 instead of subkey signals, the control input of the block P is fed with signals of the binary 
vector V generated depending on the value of subblocks being converted at intermediate 
conversion steps. When ciphering, the same four n-bit subkeys K4, Ko, K2 and K| may be 
used in carrying out each ciphering round. In this case, when the typical subblock size is 
n=32 ? the secret key length is 128 bits. When secret key of a larger size is employed, each 
10 round may use IQr, K4M, K^ and Kir-3. For example, when the round number is r=3, the 
first round uses subkeys K4, K 3 , K 2 , and Ki, the second round uses subkeys Kg, K 7 , K 6 
and K 5 , the third round uses subkeys Ki 2? K] 1, K10 and K 9 . 

The possibility of technical implementation of the claimed method is explained 
with its following specific embodiments. 
1 5 Example 1 . 

This example relates to the use a method for ciphering data. The secret key is 
presented in the form of four subkeys IQr, K4M, Kn-2, and K4r-3* One ciphering round is 
described by the following procedural sequence: 



1 . Convert subblock A according to expression: 



20 



A <— A ® K 4r -3, 



where n ^-" is designation of assignment operation. 



2. Convert subblock B according to expression: 



B<-B®[±lK 4 r-2. 
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3. Depending on the value of subblock A and on subkey K 4r -i, to effect 
transposition of bit of subblock . 

4. Convert subblock A according to expression: 

A <- A ®[±1 B. 

5. Depending on the value of subblock B and on subkey K 4r , effect transposition 
of bits of subblock A. 

6. Convert subblock B according to expression: 

Bf-B0A, 

Example 2. 

This example describes one round of unilateral conversions according to the 
following procedural sequence: 

1 . Generate binary vector V: 

V <- A «< B. 

2. Convert subblock B according to expression: 

B B <g>[±l V. 

3. Generate binary vector V depending on its value at the previous step and on the 
values of subblocks A and B according to formula: 

V<-(V«< A)0 (B«< 13). 

4. Convert subblock A according to expression: 

A<- A© V. 

5. Depending on the values of A and V, effect transposition of bits of subblock B. 

6. Convert subblock A according to expression: 

A <- A ®[±1 B. 

7. Generate binary vector V: 
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V<-(V<«B)0 (A«< 11). 

8. Depending on the values B and V effect transposition of bits of subblock A. 

9. Convert subblock B according to expression: 

B <- B 0 A. 

Fig. 2 shows a possible embodiment of the controlled transposition block using the 
totality of elementary switched S. This embodiment corresponds to the block P having 8- 
bit input for data signals and 8-bit input for control signals designated with dotted lines 
similar to designation in Fig. 1 . 

The number of various versions of the transposition operation is equal to the 
number of possible code combinations at the control input and is 2 8 = 256 for the block P 
with the structure presented in Fig.2, which exceeds the number of cyclic shift operations 
used in the closest prior art method. Using the similar method, it is possible to make up 
the scheme for block P with an arbitrary size of data input and control signal input, in 
particular, for block P with 32-bit data input and 32-bit control signal input. In the latter 
case, the number of different variations of transposition operation equal to 2 32 > 10 9 is 
achieved. 

Fig. 3 shows the structure of controlled transposition block having 32-bit data 
input and 79-bit control input. This controlled transposition block implements a unique 
transposition of input binary bits for each possible value of code combination at the 
control input the number of which is 2 79 . External information inputs of the controlled 
transposition block are designated il, i2,...., i32, external outputs are designated ol, 

o2, ,o32, control inputs are designated cl, c2,...., c79. Elementary switches S are 

connected in such a way as to form a matrix consisting from 3 1 lines. In the first line, 3 1 
elementary switches are connected, in the second line, 30, in the third line, 29, etc. In 
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each subsequent line, the number of elementary switches is reduces by 1 . In the lowest 
line 31,1 elementary switch is connected. 

The number j * 31 line has 33-j inputs, 33-j outputs and 32-j control inputs. The 
last (rightmost) output of the j-th line is an external output of the controlled transposition 
5 block, the remaining 32-j outputs of the j-line are connected to the corresponding inputs 
of the G+lMh line. The last 31 line has two outputs and both of them are external outputs 
of the controlled transposition block. A unitary (u=l) control signal is supplied to not 
more than on control input of each line. Binary-32-order decipherers Fi, F2,....,Fis and 
binary- 16-order decipherer F I6 serve to meet this requirement. Decipherers Fj, F 2 ,...., F i5 

10 have five external control inputs to which an arbitrary 5-bit binary code is supplied, and 
32 outputs. The decipherers generate a unitary signal only at one output. A zero signal is 
set at the remaining 31 inputs. Decipherer Fi 6 has 4 outputs to which an arbitrary 4-bit 
binary code is supplied, and 16 outputs only at one of which a unitary signal is set. For all 
decipherers, F|, F 2 , , F15 and Fi 6 , each input binary code value defines a uniquely 

15 possible output number at which the unitary signal (u=l) is set. 

A part of decipherer Fh outputs, where h <15, are connected to control inputs of 
the h-th line (32-h inputs), while a part of inputs are connected to control inputs of the 
(32-h)-th line ( the remaining h decipherer outputs). The control signal u=l is set at each 
line on not more than one elementary switch. The line input connected to the right input 

20 of elementary switch to which a unitary control signal is supplied is commuted with the 
external output of the controlled transposition block corresponding to this line. If the 
unitary control signal is fed to the leftmost elementary switch, then the external output of 
the controlled transposition block (block P) is commuted with the leftmost line input. The 
first line commutes one of the external inputs il, i2, , i32 of the block P with the 
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external output ol, while the remaining 31 external inputs commute with the inputs of the 
second line. The second line commutes on of the remaining 31 of the external input with 
the external input o2, while the remaining 30 external inputs commute with the inputs of 
the 3 rd line, and so on. Such structure of the block P implements the unique transposition 
5 of input bits for each value of binary code supplied to the 79-bit control input of the 
block P. 

For example, the following version of using the control 79-bit input in the 
cryptographic conversion scheme, shown in Fig.l, is possible. 32 bits are used as control 
signals, for example, of subblock B, and 47 bits of the secret key. As the latter, for 

10 example, 32 bits of subkey K 4r -i and 15 bits of subkey K 4r -2 may be used. In this case, 
when the secret key is entered into the ciphering device, depending on these secret key 47 
bits, one of 2 47 different modifications of the bit transposition operation is generated 
which depends on the input block value. Here each modification of this operation 
includes 2 32 of different operations of transposing bits of subblock A selection of which is 

15 determined by the value of subblock B. Modification selection is not predetermined since 
it is determined by the secret key. This additionally enhances resistance of the 
cryptographic conversion. If the ciphering device employs 4 blocks P having the structure 
shown in Fig.3, then the number of possible combinations of modifications of the 
transposition operations being set on clocks P depending on the secret key, may be set up 

20 to (2 47 ) 4 = 2 188 using the secret key with a length not less than 188 bits. 

Fig.4 clarifies the operation of the elementary switch where u is control signal, a 
and b are input data signals, c and d are output data signals. 

Tables in Fig.5 and 6 demonstrate dependency of output signals on input and 
control signals. It is apparent from these tables that when u=l, line a is commuted with 
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line c, and line b with line d. When u=0, line a is commuted with line d 3 and line b with 
line d. 

Due to the simple structure, the modern planar technology of manufacturing 
integrated circuits allows to easily produce cryptographic microprocessors comprising 
controlled transposition blocks with the input size of 32 and 64 bits. 

The above examples show that the proposed method for cryptographic 
conversions of binary data blocks is technically feasible and enables to solve the problem 
that has been set. 

Industrial Applicability 
The claimed method may be realised, for example, in specialised cryptographic 
microprocessors providing ciphering rate in the order of 1 Gbit/s which is sufficient for 
ciphering in the real time data transmitted over high-speed fibre optic communication 
channels. 
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